søndag 5. mai 2013

OpsMgr: Turn Agent Proxy on by default

Many people working with Operations Manager like to turn on Agent Proxy for all agents. This can be a security risk if you import a management pack that exploit Agent Proxy. However, this is rare and many management packs require Agent Proxy anyway. Therefore, you should always take great care when importing management packs. Always research the developer to find out if he/she can be trusted. Also make shure to design-check every management pack before you use it in a production environment. If you do this, you should be safe.

To turn Agent Proxy on by default open up PowerShell (not Operations Manager Shell), then type in as follows (substitute SRVSCOMMS01 with the name of your management server):
 Add-PSSnapin "Microsoft.EnterpriseManagement.OperationsManager.Client"  
 New-ManagementGroupConnection -ConnectionString:SRVSCOMMS01
 Set-Location "OperationsManagerMonitoring::"  
 Set-DefaultSetting -Name HealthService\ProxyingEnabled -Value True  
You can also turn on Agent Proxy for installed agents by using Operations Manager Shell:
 Get-SCOMAgent | where {$_.ProxyingEnabled.Value -eq $False} | Enable-SCOMAgentProxy